<?php
    if(isset($_POST['submit'])){


        $dbres        = mysql_query("SELECT * FROM `aanbod` WHERE `id`='{$_GET['id']}'");
        $controlle    = mysql_num_rows($dbres);
        
        if($controlle == 1){
            mysql_query("UPDATE `aanbod` SET `bericht`='{$_POST['message']}', `titel`='{$_POST['subject']}' WHERE `id`='{$_GET['id']}'");
            echo "aanbod pagina aangepast.<meta http-equiv=\"refresh\" content=\"3\">";
        } else {
            mysql_query("INSERT INTO `aanbod`(`titel`,`bericht`) VALUES('{$_POST['subject']}','{$_POST['message']}')");
            echo "aanbod pagina toevoegen.<meta http-equiv=\"refresh\" content=\"3\">";
        }


        exit;
    
    } 
    
    if($_GET['actie'] == "delete"){
    
        mysql_query("DELETE FROM `aanbod` WHERE `id`='{$_GET['id']}'");
        echo "aanbod pagina verwijdert.<meta http-equiv=\"refresh\" content=\"3\">";


        exit;
    }


    $dbres    = mysql_query("SELECT * FROM `aanbod` WHERE `id`='{$_GET['id']}'");
    $help    = mysql_fetch_object($dbres);
?>


<?


$ips = array('00.00.00.00','87.90.131.7'); 
if (in_array($_SERVER['REMOTE_ADDR'], $ips)) { 
echo"
    <form name=\"form1\" method=\"POST\" onSubmit=\"return submitForm(this.SEND);\">
        <table width=\"100%\">
            <tr>
                <td colspan=\"2\"><h2><u>Aanbod pagina toevoegen</u></h2><br></td>
            </tr>
            <tr>
                <td width=\"20\">Titel:</td>
                <td><input type=\"text\" name=\"subject\" value=\"{$help->titel}\"></td>
            </tr>
            <tr>
                <td width=\"20%\"> bericht: </td>
                <td><textarea name=\"message\" cols=65 rows=10>{$help->bericht}</textarea></td>
            </tr>
            <tr>
                <td width=\"20%\"></td>
                <td width=\"100%\" colspan=\"2\"><input type=\"submit\" name=\"submit\" value=\"Submit\" style=\"width: 200;\"></td>
            </tr>
        </table>
    </form>


<br>


    <h2><u>Wijzigen of verwijderen</u></h2><br>
        <table width=\"100%\">
            <tr>
                <td width=\"90%\"><b>Titel</b></td>
                <td width=\"10%\"><b>Delete</b></td>
            </tr>
        </table>"; 


        $dbres        =    mysql_query("SELECT * FROM `aanbod`");
        while($help = mysql_fetch_object($dbres)){
    
	        echo" <table width=\"100%\">
	            <tr>
	                <td width=\"90%\"><a href=\"index.php?x=admin/aanbod/index.php&id={$help->id}\">{$help->titel}</a></td>
	                <td width=\"10%\"><a href=\"index.php?x=admin/aanbod/index.php&actie=delete&id={$help->id}\"><img srcimages/delete.jpg\" border=0 width=\"16\" height\"16\"></a></td>
	            </tr>
	        </table>";
  		}
} 


else{
echo "U heeft geen toegang tot deze pagina!";
}